412| AccessPoints ( APs) DellPowerConnect W- Series ArubaOS 6.2 | User Guide
Certificate based authentication allows a controller to authenticate a AP using its certificates instead of a PSK.
You can manuallyprovision an individual AP with a full set of provisi oning parameters,or simultaneously
provision an entire group of APs by defining a provisioning profile which contains a smaller set of provisioning
parametersthat can be applied the entireA P group.When you manuallyprovision an individual AP to use
certificated-based authentication, you must connect that AP to the controller beforeyo u can definei ts
provisioning settings.
Use Pre-SharedKey (PSK)authentication to provision an individual remote AP or a group of remote APs using
an InternetKey E xchangePre-Shared Key (IKE PSK). This option requires you to performthe following
additional steps:
a. Enter and confirm the pre-sharedkey (IKE PSK).
b. In the User credential assignment section, specify if you want to use a Gl obal User Name/password or a Per
AP User Name/Password.
nIf you use the Per AP User Names/Passwords option, each RAP is given its ow nuser name and password. I
nIf you use the GlobalUser Name/Password option, all selected RAPs are given the same (shared) user
nameand password.
c. Enter the username, and enter and confirm the password. If you want the controllerto automati callygenerate
a user nameand passwo rd,select Use A utomatic Generation, then click Generate by t heUser Name and
Password fields.
8. (Optio nal)If your AP will use Point-to-Point Protoco lover Ethernet (PPPoE )t o authenticatei tselfto a service
provider,select the PPPoE Parameters checkbox and entert he followingP PPoE values:
lService Name: Either an ISP name or a class of service configured on the PPP oE server.
lUser Name: Set the PPPoE User Name for t his remote AP.
lPassword: Enter and then confirm the PPPoE passwo rdfor t his remote AP.
9. I n the Master Discovery section, set t he Master IP Address.
lFor a campusA P or a remote AP on a private network, enterthe controller’s IP address
lFor a Remote AP with the controller on a public network,enter the controller’s public IP address
lFor a remote AP with a controllerbehind a firewall, enter the public addressof the NAT device t o which the
controlleris connected
10. (Optional) In the IPSett ings section, specify a trunk VLAN by entering a VLAN ID from 1-4095, inclusive. If
you configurean uplink VLAN on an AP connected to a port in trunk mode,t he AP sends and receives frames
tagged with this VLAN on it s Ethernet uplink.
By default,an A P has an uplinkvlan of 0 , which disables this feature.N ote that if an AP is provisioned with an
uplinkVLA N,i t must be connected to a trunkmode port or the AP ’s frameswill be dropped.
11. Under IP Setti ngs, select Obtain IP Address Using DHCP to obtain an IP address for your AP using DHCP.
or
select Use the Following IP address and entert heappropriate values in the following fields:
lIP address: IP address for the AP, in dotted-decimal format
lSubnet mask:Subnet mask for the IP, i n dotted-decimal format.
lGateway IP address: The IP address the AP uses to reach other networks.
lDNS IP address: The IP address of the Domain Name Server.
lDomain name: (optional) The defaultdomain name.
12. (Optional)In the FQLN Mapper section, you may click the Campus,Building and Floor drop-downlists to
identify a fullyqualified location name (FQLN) for the AP. To clear an existing FQLN, click the Remove FQLN
checkbox.